Analysis
-
max time kernel
115s -
max time network
115s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
08/07/2024, 15:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2ccd086bab1697334dc1993b23555ea1_JaffaCakes118.exe
Resource
win7-20240704-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2ccd086bab1697334dc1993b23555ea1_JaffaCakes118.exe
Resource
win10v2004-20240704-en
2 signatures
150 seconds
General
-
Target
2ccd086bab1697334dc1993b23555ea1_JaffaCakes118.exe
-
Size
73KB
-
MD5
2ccd086bab1697334dc1993b23555ea1
-
SHA1
24abc7c56a6beb3cdbda01b95e40176163edb51b
-
SHA256
ba48b510be1fbc6818f575d346edd7105199e29fcb664f20f3a6d5b26823743d
-
SHA512
e8f93ce11749629b0bb176ac17bdb719e46ef92bd71c0d59c61207fd630db6d74bd3e64d6bd8383e6654d4204907d14cdcd6d82102426d06bc2763627c2c2975
-
SSDEEP
1536:zEo3rwJ7mU5CkLXvtfuUkOP3Ic4dQVb8ggxyDu8n2CDNRrxK9YeN2MuDPV:uQU5Ckbhu+ZuxyDu8n2CDSYrDPV
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Windows\CurrentVersion\Run\ceccc7cbdbdbd28dc6dbc6 = "C:\\Users\\Admin\\AppData\\Roaming\\hxxq.exe" 2ccd086bab1697334dc1993b23555ea1_JaffaCakes118.exe -
Suspicious behavior: RenamesItself 1 IoCs
pid Process 1944 2ccd086bab1697334dc1993b23555ea1_JaffaCakes118.exe